This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa File: f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa (raw, json) Hash identifier: RXJVB73A9H1CRDLTbWuDJLF+eFBWkHOAvYR8TgseWas= Subject key identifier: EF:6F:D8:27:72:0B:80:3B:1E:57:5C:07:12:F7:AD:3F:0F:5D:BD:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C06D6175C497ED7870B90F000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 54253 IP address blocks: 151.145.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:17:5c:49:7e:d7:87:0b:90:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=616c61fa-4457-40dd-9f2e-4b7c583cda95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:c3:08:a4:9a:c6:02:de:80:9d:94:5a:5b: 2d:42:ff:8a:ca:d9:0a:4e:6e:84:b5:49:7b:94:fe: 7c:dd:6d:72:41:97:3b:91:13:ef:a2:52:3d:26:aa: c9:9f:4c:3a:23:ff:1e:db:d5:e7:fc:5b:67:90:0a: b2:d6:99:d8:c2:a6:c7:13:ad:fb:4a:a7:50:e5:1c: d8:e2:fa:e5:34:b4:9c:c1:d8:c7:f4:8b:80:a5:68: c2:76:57:09:d6:d8:59:76:31:82:18:9a:fd:8e:66: 9a:49:90:6e:d1:1c:6d:99:cd:2d:6e:6a:27:77:85: 90:dc:c6:12:16:66:60:3e:b3:32:27:8e:4f:9b:10: 9e:cc:c0:d3:f5:38:d4:f4:e1:18:5e:f1:fb:9d:e1: 26:26:80:13:53:f8:f9:40:e8:e6:81:60:7b:94:b8: 7b:fb:cb:92:f4:cc:23:31:9a:38:e6:a0:d6:76:f5: 25:d1:b4:ff:41:34:c2:e7:9b:6a:00:e1:43:ec:93: 29:6b:05:e0:55:08:a6:e9:b0:4f:25:94:72:d5:6f: 51:82:ce:cb:19:4d:65:c0:9b:8b:3b:5d:23:6b:60: a3:68:52:dd:ff:95:66:7b:c3:8c:ab:d4:88:97:14: f1:71:2b:d0:2d:00:fd:3a:7b:e6:03:a8:9c:1c:e3: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6F:D8:27:72:0B:80:3B:1E:57:5C:07:12:F7:AD:3F:0F:5D:BD:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f2ff3cdc-a35d-321b-a159-b358b3d016fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 151.145.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:47:f7:89:f5:ff:cc:f7:3a:50:fc:f0:c9:45:6e:cf:b2:bc: 10:d7:56:1c:79:2c:57:cb:bd:1d:ba:9e:31:6f:f2:99:56:f9: a0:84:09:69:98:b2:95:5d:09:c9:76:6a:c9:e7:90:b7:31:1d: 63:a2:51:f5:3f:1e:ba:05:81:0b:13:c5:0a:07:22:3e:b8:f4: 06:e8:f6:04:a3:3a:01:b2:ee:f7:06:97:46:3c:51:d7:e2:8d: e6:75:0b:4a:3e:fe:41:e4:fe:cc:b0:cf:08:62:ae:9e:5e:7e: 14:3f:6e:17:a1:39:71:97:b5:a5:36:05:c9:9c:68:4f:24:6c: f8:ee:df:ab:04:5e:5e:cd:1c:92:2d:cb:2e:b4:57:90:1c:28: db:2f:69:8f:04:b9:61:92:f9:95:94:01:ee:71:8a:b5:06:02: eb:37:82:36:82:15:73:ac:a9:a7:6b:bd:ee:4e:d2:94:62:07: f7:76:f3:27:68:f3:98:4b:8c:12:74:dc:1a:86:79:f4:ca:ea: 4a:aa:59:55:56:37:68:99:b8:3c:15:28:b7:29:9d:c7:dd:a7: ca:19:36:cf:ad:c8:66:d3:c5:9e:aa:3e:e4:72:70:6b:bf:97: 94:21:c2:b1:1d:67:08:96:36:8a:f2:5a:4a:b4:d6:7a:df:10: f0:ba:c2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1hdcSX7XhwuQ8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk NjE2YzYxZmEtNDQ1Ny00MGRkLTlmMmUtNGI3YzU4M2NkYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumPDCKSaxgLegJ2UWlstQv+KytkKTm6EtUl7 lP583W1yQZc7kRPvolI9JqrJn0w6I/8e29Xn/FtnkAqy1pnYwqbHE637SqdQ5RzY 4vrlNLScwdjH9IuApWjCdlcJ1thZdjGCGJr9jmaaSZBu0Rxtmc0tbmond4WQ3MYS FmZgPrMyJ45PmxCezMDT9TjU9OEYXvH7neEmJoATU/j5QOjmgWB7lLh7+8uS9Mwj MZo45qDWdvUl0bT/QTTC55tqAOFD7JMpawXgVQim6bBPJZRy1W9Rgs7LGU1lwJuL O10ja2CjaFLd/5Vme8OMq9SIlxTxcSvQLQD9OnvmA6icHOPo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9v2CdyC4A7HldcBxL3rT8PXb1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjJmZjNjZGMtYTM1ZC0z MjFiLWExNTktYjM1OGIzZDAxNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtH94n1/8z3OlD88MlFbs+yvBDXVhx5LFfLvR26njFv8plW+aCECWmY spVdCcl2asnnkLcxHWOiUfU/HroFgQsTxQoHIj649Abo9gSjOgGy7vcGl0Y8Udfi jeZ1C0o+/kHk/sywzwhirp5efhQ/bhehOXGXtaU2BcmcaE8kbPju36sEXl7NHJIt yy60V5AcKNsvaY8EuWGS+ZWUAe5xirUGAus3gjaCFXOsqadrve5O0pRiB/d28ydo 85hLjBJ03BqGefTK6kqqWVVWN2iZuDwVKLcpncfdp8oZNs+tyGbTxZ6qPuRycGu/ l5QhwrEdZwiWNoryWkq01nrfEPC6wto= -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:55 2025 by rpki-client